PowerFolder Java Object Deserialization RCE

The remote PowerFolder server is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated, remote attacker can exploit this, by sending specially crafted Java objects to the...